← cd ~/intune-errors
// intune-errors · Enrollment
0x8018002BAuto MDM Enroll: Failed (Event ID 76)
Automatic MDM enrolment through Group Policy failed. The user UPN uses an unverified or non-routable domain (such as .local), or MDM user scope is set to None.
| Hex | 0x8018002B |
|---|---|
| Decimal | -2145910741 (unsigned 2149056555) |
| Area | Enrollment |
How to fix it
Give affected users a valid, verified UPN suffix and let Microsoft Entra Connect sync, or set MDM user scope to All or Some under Microsoft Entra ID > Mobility (MDM and MAM) > Microsoft Intune.
Find it on the device
Enrolment errors are logged in Event Viewer under Applications and Services Logs › Microsoft › Windows › DeviceManagement-Enterprise-Diagnostics-Provider › Admin:
Get-WinEvent -LogName "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" -MaxEvents 200 |
Where-Object Message -match "0x8018002B" |
Format-List TimeCreated, Id, MessageOther enrollment errors
- 0x8018000A The device is already enrolled.
- 0x8007064C The machine is already enrolled.
- 0x80180026 Something went wrong. Confirm you are using the correct sign-in information...
- 0x80180003 This user is not authorized to enroll.
- 0x801C0003 This user is not authorized to enroll.
- 0x80180018 Something went wrong.
- 0x80180002 MENROLL_E_DEVICE_AUTHENTICATION_ERROR
- 0x80180001 MENROLL_E_DEVICE_MESSAGE_FORMAT_ERROR
- 0x80180004 MENROLL_E_DEVICE_CERTIFCATEREQUEST_ERROR
- 0x80180005 MENROLL_E_DEVICE_CONFIGMGRSERVER_ERROR